New Phishing Attacks Use Trusted Email Infrastructure and URL Cloaking to Bypass Security Tools

Phishing is arriving via trusted email systems. Instead of using obvious malicious addresses, attackers send ordinary account alerts, invoices and renewal notices that lead victims into web-based traps. The approach moves danger into a click path that can change in real time. A message may pass authentication, carry no harmful file and still guide...